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Tl - Network abnormality monitoring apparatus records operation 

condition of network detected at regular intervals and compares 
recorded data with current operation condition to detect abnormality 
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AB - JP2000041039 NOVELTY - A measurement unit (1 00) measures 
the network operating condition in addition to analyzing packet 
data. The network condition recorded at regular intervals is set as 
standard data. The network condition measured currently is 
compared with said standard data based on which a decision unit 
(230) judges an abnormality. DETAILED DESCRIPTION - An 
INDEPENDENT CLAIM is also included for network abnormality 
monitoring procedure. 

- USE - For monitoring abnormality in network. 

- ADVANTAGE - As network conditions in previous time periods is 
used forjudging abnormality, the experience of network 
management etc. is no more required. DESCRIPTION OF 
DRAWING(S) - The figure shows the block diagram of network 
abnormality monitoring apparatus. (100) Measurement unit; £30) 
Decision unit. 
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IN - MACHIDA NAOYOSHfcURATA M ASAH I KOYAM AG I SH I 
NORIKAZUTAKESADA MUTSUHARU 

PA - HITACHI ELECTRONICS SERVICE CO LTD 

Tl - DEVICE AND METHOD FOR MONITORING NETWORK 

AB - PROBLEM TO BE SOLVED: To provide a network monitoring 

device capable of setting the reference of abnormality judgement 
from the operation result in the past. 
- SOLUTION: The operating state of a networkl is measured from 
packet data on the networkl by an operating state measuring part 
100, the measured operating state is estimated by an estimation 
part 210, the threshold value of abnormality judgement concerning 
the network 1 is set based on the estimated operating state by a 
threshold value setting part 220, a discrimination part 230 
compares the operating state measured by the operating state 
measuring part 100 with the threshold value set by the threshold 
value setting part 220 and measures whether the operating state is 
abnormal or not and when the discrimination part230 discriminates 
abnormality, it is reported by a reporting part320. 
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